Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 17, 2025

Bumps super-linter/super-linter from 8.1.0 to 8.2.1.

Release notes

Sourced from super-linter/super-linter's releases.

v8.2.1

8.2.1 (2025-10-15)

🐛 Bugfixes

⬆️ Dependency updates

  • docker: bump the docker group with 2 updates (#7100) (28c5681)
  • npm: bump eslint from 9.36.0 to 9.37.0 in /dependencies (#7102) (cf6cb1e)
  • npm: bump renovate from 41.132.2 to 41.136.0 in /dependencies (#7107) (495692f)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#7101) (b3a735d)
  • npm: bump the npm group across 1 directory with 4 updates (#7108) (ce227b3)
  • npm: bump typescript (#7109) (deba11c)
  • python: bump the pip group across 1 directory with 7 updates (#7106) (7c02a56)

🧰 Maintenance

v8.2.0

8.2.0 (2025-09-30)

🚀 Features

🐛 Bugfixes

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

8.2.1 (2025-10-15)

🐛 Bugfixes

⬆️ Dependency updates

  • docker: bump the docker group with 2 updates (#7100) (28c5681)
  • npm: bump eslint from 9.36.0 to 9.37.0 in /dependencies (#7102) (cf6cb1e)
  • npm: bump renovate from 41.132.2 to 41.136.0 in /dependencies (#7107) (495692f)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#7101) (b3a735d)
  • npm: bump the npm group across 1 directory with 4 updates (#7108) (ce227b3)
  • npm: bump typescript (#7109) (deba11c)
  • python: bump the pip group across 1 directory with 7 updates (#7106) (7c02a56)

🧰 Maintenance

8.2.0 (2025-09-30)

🚀 Features

🐛 Bugfixes

... (truncated)

Commits
  • 2bdd90e chore(main): release 8.2.1 (#7094)
  • 51e00dd chore: use powershell from dotnet sdk image (#7141)
  • 2e6ad3d chore: update rack to 3.2.3 (#7136)
  • 7508f4c fix: validate DEFAULT_BRANCH when using find (#7119)
  • cf6cb1e deps(npm): bump eslint from 9.36.0 to 9.37.0 in /dependencies (#7102)
  • 495692f deps(npm): bump renovate from 41.132.2 to 41.136.0 in /dependencies (#7107)
  • deba11c deps(npm): bump typescript (#7109)
  • 28c5681 deps(docker): bump the docker group with 2 updates (#7100)
  • b3a735d deps(npm): bump the eslint-plugins-configs group across 1 directory with 2 up...
  • ec80a77 ci(github-actions): bump peter-evans/create-issue-from-file (#7103)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 8.1.0 to 8.2.1.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@ffde3b2...2bdd90e)

---
updated-dependencies:
- dependency-name: super-linter/super-linter
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 17, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 17, 2025 03:03
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 17, 2025
@acleary-0
Copy link
Collaborator

Logo
Checkmarx One – Scan Summary & Details6ebf5ffe-5e10-4424-9e53-553b96d5f26a

New Issues (6)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
MEDIUM CVE-2025-11226 Maven-ch.qos.logback:logback-core-1.3.15
detailsRecommended version: 1.5.19
Description: Arbitrary Code Execution (ACE) vulnerability in conditional configuration file processing by QOS.CH logback-core versions through 1.5.18 in Java ap...
Attack Vector: LOCAL
Attack Complexity: LOW

ID: VF2RERclSzVuV6XCN8fg3WQJRvAqjXQW1BOpEV9wOi0%3D
Vulnerable Package
LOW Unpinned Actions Full Length Commit SHA /codeql-analysis.yml: 37
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
ID: %2Bjf06qtFq%2FhiwToB0qWaTcnrWUs%3D
LOW Unpinned Actions Full Length Commit SHA /codeql-analysis.yml: 40
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
ID: hghq8Fs7C%2Bgxpck6NX7jOZnmotE%3D
LOW Unpinned Actions Full Length Commit SHA /fortify.yml: 29
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
ID: 4ponLjQ9YqM1Tqnjw%2BAGo5j2lcc%3D
LOW Unpinned Actions Full Length Commit SHA /pr-checks.yml: 18
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
ID: nbvde%2Fv4%2BRDlqk5tZp22hg3O428%3D
LOW Unpinned Actions Full Length Commit SHA /codeql-analysis.yml: 32
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
ID: fRa7hSVmi165a0KbDv%2FtTthoeGE%3D
Fixed Issues (7)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
HIGH CVE-2023-6378 Maven-ch.qos.logback:logback-core-1.2.11
HIGH CVE-2023-6378 Maven-ch.qos.logback:logback-classic-1.2.11
HIGH CVE-2023-6481 Maven-ch.qos.logback:logback-core-1.2.11
MEDIUM CVE-2023-41329 Maven-com.github.tomakehurst:wiremock-jre8-standalone-2.35.0
MEDIUM CVE-2024-12798 Maven-ch.qos.logback:logback-classic-1.2.11
MEDIUM CVE-2024-12798 Maven-ch.qos.logback:logback-core-1.2.11
LOW CVE-2024-12801 Maven-ch.qos.logback:logback-core-1.2.11

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 1, 2025

Superseded by #292.

@dependabot dependabot bot closed this Dec 1, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/super-linter/super-linter-8.2.1 branch December 1, 2025 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants